Conversation

Notices

1. Embed this notice
   Delta Chat (delta@chaos.social)'s status on Thursday, 03-Apr-2025 07:17:04 JST Delta Chat

   new security milestone reached: #chatmail relay servers are hardened to only transfer end-to-end encrypted e-mail with metadata minimization. No cleartext message can enter or leave the secure chatmail network anymore.

   We now talk about "chatmail relays" rather than servers as they only ephemerally store messages until delivery. Dirt cheap to run.

   We opened up our #rust "chatmail core" infrastructure library and set up an overview of the community driven ecosystem ...

   https://chatmail.at

   • feld and Doughnut Lollipop 【記録係】:blobfoxgooglymlem: repeated this.
   • Embed this notice
     lps (lps@mograph.social)'s status on Thursday, 03-Apr-2025 08:41:10 JST lps

     in reply to

     @delta

     "Chatmail relays are therefore cheap to run and use:

     Hosting costs for 100K relay users are around half a Cent per user and year.

     System administration costs are near-zero after setup.

     Apps and bots can freely use instant chatmail addresses, avoiding classic e-mail server rate limits."

     THAT IS AMAZING!!!!

     Wow, you are a bunch of geniuses!!

   • Embed this notice
     feld (feld@friedcheese.us)'s status on Thursday, 03-Apr-2025 08:45:35 JST feld

     in reply to

     • Farshid Hakimy / فرشید
     @farshidhakimy @delta Currently the server admin can see a sender and recipient address. Soon, the sender will probably be noreply@ and the real sender will be hidden in the encrypted payload. Later even the sender address can be disposable so there won't be an obvious way to correlate the sender and recipient. You might be able to find the IP address of the sender using the Chatmail server you control or have compromised, but if the recipient is on another server you have no clue what their client IP is unless you can also compromise/seize that server too.
   • Embed this notice
     Farshid Hakimy / فرشید (farshidhakimy@chaos.social)'s status on Thursday, 03-Apr-2025 08:45:37 JST Farshid Hakimy / فرشید

     in reply to

     @delta I wonder how good the metadata minimization is compared to Signal.
     Does the server get to know both the sender and the recipient?

   • Embed this notice
     Delta Chat (delta@chaos.social)'s status on Thursday, 03-Apr-2025 09:31:42 JST Delta Chat

     in reply to

     Fun fact: The SMTP return code for when you try to get a not properly encrypted Internet Message (vulgo e-mail) relayed:

     523 Encryption Needed

     It's standardized already :)

   • Embed this notice
     adb (adbenitez@mastodon.social)'s status on Thursday, 03-Apr-2025 09:32:01 JST adb

     in reply to

     • Farshid Hakimy / فرشید
     • feld

     @feld (notice that the server sees that "anonymous user with random id" sends a message to another anonymous user, unlike on Signal where sealed sender is more relevant since user is identified by phone number, and they could still map the IP to the phone number in their central server and know who you are)

     @delta @farshidhakimy

     feld likes this.